New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

please upgrade dom0 or consider using distribution with longer lifecycle #1086

Closed
edwintorok opened this Issue Jul 28, 2015 · 3 comments

Comments

Projects
None yet
3 participants
@edwintorok

I installed Qubes R3.0 rc1 to test it, and it looks like dom0 is using Fedora20, which is EOL. For something as security critical as dom0 I wouldn't like to run a distribution that doesn't get security updates anymore.
In fact even if there would be no security issues yet there is already a problem with Fedora20 as dom0:

I tried updating dom0 (by clicking on Update VM in the context menu), but I got a socket error after a while (probably lost network connection). Tried updating again, but it just seemed to get stuck on launching the update. Tried rebooting but it got stuck on the Q screen with progress bar at half, I've had to forcefully shutdown using the power button.
Now I get a corrupted screen (some diagonal lines) when booting and after a while a kernel panic before it even asks me for the disk password.
I would file a bug report about it with the panic trace and some logs, but since Fedora 20 is EOL I don't have a place where to file that bugreport.

I'd suggest to upgrade to fedora22 already to have a longer lifecycle for Qubes's dom0, and to have a place where to file bugreports if something breaks.

Alternatively Qubes could give a choice between Fedora and Debian as dom0, Debian stable usually has a longer lifetime and may even have LTS support.

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Aug 4, 2015

Member

Take a look at this message:
https://groups.google.com/d/msg/qubes-users/D8CvUWYpQxk/VYFLp7raI_IJ

That said, we plan separation GUI into separate domain, then migration dom0 to some minimal distribution (roadmap). GUI distribution upgrades would be much easier (and more frequent as a consequence). We haven't decided yet if we'll stay with Fedora there (but most likely).
But for now (R3.0), dom0 will be based on Fedora 20.
We planned dom0 upgrade in R3.1/R3.2 as a stopgap until GUI domain got implemented, but it will be probably postponed, because of major changes in KDE, which requires more work than originally anticipated.

Member

marmarek commented Aug 4, 2015

Take a look at this message:
https://groups.google.com/d/msg/qubes-users/D8CvUWYpQxk/VYFLp7raI_IJ

That said, we plan separation GUI into separate domain, then migration dom0 to some minimal distribution (roadmap). GUI distribution upgrades would be much easier (and more frequent as a consequence). We haven't decided yet if we'll stay with Fedora there (but most likely).
But for now (R3.0), dom0 will be based on Fedora 20.
We planned dom0 upgrade in R3.1/R3.2 as a stopgap until GUI domain got implemented, but it will be probably postponed, because of major changes in KDE, which requires more work than originally anticipated.

@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong May 31, 2016

Member

@marmarek, should this be closed as a duplicate of #1807, or would you prefer to change it to fit your comment above?

Member

andrewdavidwong commented May 31, 2016

@marmarek, should this be closed as a duplicate of #1807, or would you prefer to change it to fit your comment above?

@marmarek marmarek added the duplicate label May 31, 2016

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek May 31, 2016

Member

There is already #833 for GUI domain, so this is a dupplicate of #1807

Member

marmarek commented May 31, 2016

There is already #833 for GUI domain, so this is a dupplicate of #1807

@marmarek marmarek closed this May 31, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment